Suspicious dbPowerAmp behavior

[learjeff]

When clicking on a web link for a WMA file, I got the following message from my Cisco Security Agent:

The process "C:\Program Files\Windows Media Player\wmplayer.exe" is attempting to insert the code in "C:\PROGRAM FILES\ILLUSTRATED\DBPOWERAM\dAPKeyControl.dll"
into all running processes.

Is dBPowerAmp responsible for causing this to happen? (It's clearly dB code that's being installed.)

If so, why, and what can I do to make it NOT do it?
I did have dMP open at the time. I'm using dMC version 10 and I don't know what version of the music player (how could I tell -- when I bring up the credits screen all I get is some stupid game.)

I use dMC a lot and frequently recommend it to people for internet music collaboration. I was aghast to find it apparently involved in activity I would expect from a trojan horse.

Please explain this and set my mind at ease. I'd hate to have to uninstall dMC and try to find a replacement!

Thanks,
Jeff

[Spoon]

Re: Suspicious dbPowerAmp behavior

Sounds like a false alarm, if you restart windows without dap running you can delete that dll. It is only used for picking up keyboard commands for dAP.

[learjeff]

Re: Suspicious dbPowerAmp behavior

But why would one program be adding it to other running processes? Or are you telling me no way would your code be responsible for doing this?

Thanks,
Jeff

[Spoon]

Re: Suspicious dbPowerAmp behavior

That dll is a global hook to picking up keypresses, I wouldn't have thought that it would be attached to every process, just to a low level in windows.

[learjeff]

Re: Suspicious dbPowerAmp behavior

OK, I understand!

In future versions, you might consider an option to disable this behavior. If one security app picks it up, others may start to also. Of course, it's possible that the error message from the security app is more severe sounding than what's actually going on -- i.e., Windows really might be installing it once, but to apply to all programs. The message makes it sound like it's modifying the other program executables, which evidently isn't the case. I may be able to look into that, and I'll let you know if I learn anything.

It also seems strange that it's Windows Media Player that causes the security message, not dAP or dMC.

Thanks for your response.